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Paper  Abstract 


Recent  governmental  reform  in  Burma  is  precipitating  calls  from  inside  and  outside 
of  the  country  to  remove  longstanding  constraints  on  people’s  activity  on  the  Internet.  The 
ability  to  communicate  one’s  thoughts  globally  and  openly  without  restriction  seems  the 
pinnacle  of  liberalism  and  certainly  something  the  United  States  should  support.  This 
assumes  universal  benevolent  intent,  however.  The  Internet,  and  the  connectivity  to  people 
and  information  it  provides,  is  neither  good  nor  bad.  While  many  good  people  in  Burma 
would  benefit  from  increased  access  and  fewer  controls,  there  are  also  some  who  would  use 
this  freedom  to  cause  internal  strife,  commit  cybercrime,  and  conduct  cyberterrorism. 

Burma  faces  a  real  dilemma.  On  one  hand,  implementing  strict  Internet  controls  will 
lead  to  accusations  that  the  government  is  continuing  with  old  junta  practices  of  censorship 
and  human  rights  abuses.  On  the  other,  insufficient  monitoring  and  regulation  by  the 
Burmese  government  will  allow  criminals  and  terrorists  to  “end  run”  existing  physical 
controls  and  a  hateful  few  the  opportunity  to  entice  the  population  into  attacking  their  own 
countrymen.  The  United  States  has  a  vested  interest  in  a  stable  Burma  and  human  rights  and 
should  therefore  support  and  assist  the  Burmese  government  as  it  balances  Internet  freedoms 
with  necessary  controls  on  cyberhate,  cybercrime,  and  cyberterrorism. 
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Introduction 


In  2010,  few  inside  or  outside  of  Burma  expected  much  change  following  national 
elections  that  observers  roundly  criticized  as  flawed.1  Thein  Sein,  the  newly-elected 
president,  had  served  as  the  country’s  Prime  Minister  since  2007.  Members  of  the  recently- 
dissolved  military  junta  also  did  well,  winning  80  percent  of  the  parliamentary  seats."  Thein 
Sein  insisted,  however,  that  he  would  make  sweeping  changes  to  the  government,  stating  in 
an  early  BBC  interview  that  he  was  “merely  responding  to  the  people's  desire  for  reform” 
and  that  “[his]  future  depends  on  the  people  and  their  wishes.”  He  would  have  plenty  to  fix 
in  the  area  of  telecommunications.  In  2010,  Burma  was  one  of  the  most  isolated  states  on  the 
planet  with  an  estimated  7  televisions  and  107  landline  telephones  per  1,000  citizens.4  Only 
one  person  in  a  hundred  owned  a  cell  phone  and  one  in  five  hundred  had  an  Internet 
connection.5  Just  10%  of  the  population  had  a  radio  with  which  to  listen  to  one  of  the  four 
government-owned  radio  stations.6  Burma’s  telecommunications  policies,  state  censorship, 
and  legal  and  extralegal  restrictions  on  the  population’s  freedom  of  expression  led  Reporters 
Without  Borders  to  rank  Burma  173  of  178  countries  on  the  Press  Freedom  Index  and  to 
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label  its  government  “an  enemy  of  the  Internet.” 

President  Thein,  however,  has  proved  to  be  a  surprisingly  progressive  moderate  and 
has,  since  his  election,  achieved  impressive  progress  toward  making  Burma  a  fully-functional 
member  of  the  international  community.  As  will  be  detailed  in  this  paper,  one  area  where  he 
has  largely  kept  his  promises  is  in  the  area  of  telecommunications.  He  has  loosened,  if  not 
completely  removed,  fifty  years  of  stifling  practices  and  policies.  Through  increased  social 
and  political  liberalization,  turbo-charged  with  massive  foreign  investment  possible 
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following  the  relaxation  of  international  sanctions,  he  is  poised  to  bring  the  majority  of 
Burmese  people  to  the  global  Internet  community-and  vice  versa. 

The  United  States,  as  one  would  expect,  enthusiastically  supports  the  ubiquitous 
global  interconnectedness  and  the  associated  empowerment  of  the  individual  the  Internet  will 
bring  to  Burma.  The  Internet,  however,  empowers  both  creation  and  destruction  equally.  Its 
introduction  to  a  society,  especially  one  experiencing  a  concurrent  social,  political,  and 
technical  revolution,  requires  careful  control.  Unsurprisingly,  since  2012,  modest  increases 
in  connectivity  and  some  relaxations  on  Internet  use  have  already  caused  issues  for  the 
Burmese  government  and  for  the  Burmese  people.  The  massive  explosion  of  Internet 
availability  Burma  will  experience  in  the  next  two  years,  and  the  associated  connection  of  the 
population  to  the  rest  of  the  world,  has  the  potential  to  radically  increase  intolerance,  crime, 
and  terrorism  in  Burma,  in  Southeast  Asia,  and  around  the  world.  For  this  reason,  the  United 
States  government  should  support  and  assist  the  Burmese  government  as  it  takes  a 
disciplined  and  measured  approach  to  Internet  adoption  in  order  to  preserve  regional 
stability,  enhance  global  security,  and  prevent  unnecessary  suffering  by  the  Burmese  people. 

The  Coming  Telecom  Revolution  in  Burma 
The  growth  of  the  telecommunications  industry  over  the  next  three  years  in  Burma, 
and  the  corresponding  ability  for  the  Burmese  population  to  communicate,  promises  to  be 
truly  revolutionary.  In  2011,  Burma  ranked  next  to  last  in  mobile  phone  penetration  rates, 
behind  even  notoriously  reclusive  North  Korea,  with  less  than  1%  of  the  population  owning  a 
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mobile  device.  Internet  availability  was  similarly  anemic  with  a  measly  .2%  of  the 
population  online  and  those  users  severely  limited  by  government-controlled  content  filtering 
and  their  activities  subject  to  arrest  and  imprisonment  under  the  heavy-handed  Electronic 
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Transaction  Law.9  Through  a  combination  of  limiting  availability  and  restricting  activities, 
the  Burmese  government  had  consciously  and  effectively  isolated  its  entire  population  from 
external  and  internal  digital  dissent. 

In  2011,  as  part  of  a  large-scale  modernization  effort,  the  Burmese  government  began 

to  breathe  life  into  the  telecommunications  sector.  One  initial  measure  was  correcting  the 

cost  for  SIM  cards  to  access  the  government-owned,  antiquated  cellular  network.  In  201 1  the 

cards  cost  $625,  well  outside  the  reach  of  all  but  a  handful  of  Burmese  citizens.10  By  2013  a 

new  policy  mandated  $250  as  the  maximum  price  for  a  SIM  card. 1 1  Mobile  phones  suddenly 
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became  more  affordable  for  the  small  Burmese  middle  class  and  ownership  grew  1,125%. 

A  similar  phenomenon  took  place  in  regards  to  Internet  usage.  When  the  government 
removed  the  filters  that  had  made  most  external  Internet  sites,  certainly  those  critical  of  the 
government,  unreachable  for  years  and  granted  blanket  amnesty  to  bloggers  who  had  been 
imprisoned  for  violations  of  the  Electronics  Transactions  Law,  young  Burmese  began  to 
frequent  Internet  cafes  in  increasing  numbers  and  with  increasing  confidence.  The  number  of 
Internet  users  in  Burma,  largely  unchanged  from  2006  -  2010,  grew  480%  from  2011  to 
2013.  This  growth,  while  impressive,  will  pale  in  comparison  to  what  industry  experts 
expect  for  the  period  2014-2016. 

In  2012,  coincident  with  the  loosening  of  international  sanctions,  the  Burmese 
government  solicited  internationally  for  companies  to  help  it  modernize  the  country’s 
outdated  national  telecommunications  infrastructure.  In  2013  it  awarded  contracts  to  a 
Norwegian  (NoreTel)  and  a  Qatari  (Ooredoo)  company.  These  companies,  and  two  domestic 
providers,  collectively  committed  to  bringing  3G14  cellular  service  to  80%  of  the  population 
by  2016,  including  coverage  to  the  majority  of  the  rural  areas.15  When  service  in  Yangon, 
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Madalay,  and  Naypyidaw  premiered  in  August  of  2014,  Ooredoo  sold  out  of  its  estimated 
three  month’s  supply  of  $1.50  SIM  cards  in  two  days.16  NoreTel  and  the  two  domestic 
telecoms  have  launches  just  behind  Ooredoo’s  and  offer  similar  pricing  plans.  Assuming 
neighboring  countries  are  analogous,  this  combination  of  low  initial  investment  costs  and 
widespread  availability  should  bring  a  large  number  of  Burmese  citizens  onto  the  3G 
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network,  and  thereby  onto  the  Internet,  in  short  order. 

The  explosion  of  mobile  phone  and  Internet  availability  and  the  corresponding  effect 
it  will  certainly  have  on  all  aspects  of  society  will  make  Burma  one  of  the  most  exciting 
information  communications  technology  (ICT)  markets  in  the  world  over  the  next  decade.  It 
is  not  unrealistic  that  during  this  time  as  many  as  thirty  million  Burmese,  previously 
physically  and  informationally  isolated  within  the  borders  of  their  country,  will  join  the 
global  online  community.  International  ICT-related  companies  certainly  see  an  opportunity. 
In  the  past  year,  Cisco,  Microsoft,  Google,  Facebook,  PayPal  and  other  companies  have  sent 
their  corporate  leadership  to  Naypyidaw  in  an  effort  to  stake  their  claim  to  a  portion  of  this 
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digital  gold  rush.  One  thing  these  leaders  consistently  note  as  an  impediment  to  progress,  a 
viewpoint  shared  with  many  within  Burma,  is  the  Burmese  government’s  current  ambiguity 
on  the  issue  of  its  population’s  freedom  of  expression  online  and  suspicions  that  officials  will 
use  the  expansion  of  the  Internet  to  expand  their  repression  of  the  people.19  Based  on  past 
abuses,  many  people  resent,  and  even  fear,  governmental  oversight  of  the  Burmese 
population’s  actions  on  the  net.  While  acknowledging  excesses  of  the  past  and  taking  a  more 
tolerant  view  on  Internet  usage  is  necessary,  Burma  is  correct  in  treating  very  seriously,  the 
dangers  lurking  in  cyberspace. 
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The  Dark  Web  and  Dangers  of  the  Internet 


The  Internet’s  ability  to  enable  communications  between  people  around  the  globe  has 
proved  as  revolutionary  as  any  other  technology  in  history.  In  the  overwhelming  majority  of 
cases,  the  unrestricted  sharing  of  ideas  and  information  has  radically  improved  work 
efficiency  and  has  globalized  industry  and  marketplaces.  It  has  enabled  education  and  other 
transfers  of  knowledge  and  exposed  people  to  new  concepts,  art,  and  music  they  would  never 
have  the  opportunity  to  experience  in  person.  With  just  a  simple  connection  to  the  net,  all  of 
this  is  possible  regardless  of  a  user’s  physical  location,  age,  social  status,  race,  gender, 
religious  belief,  or  wealth.  There  is  another  side  of  the  Internet,  one  that  also  does  not 
discriminate,  however. 

As  the  Internet  is  merely  a  conduit  for  information,  it  efficiently  and  effectively 
enables  virtuous  and  nefarious  behavior  equally.  Some  illegal  or  immoral  activities  take 
place  on  the  “surface  web,”  that  part  of  the  Internet  indexed  and  able  to  be  queried  by  search 
engines  and  easily  discovered  by  normal  users.  Examples  include  inflammatory  language  on 
Facebook,  false  or  misleading  websites,  or  websites  that  infect  the  visitor’s  computer  with 
malicious  code.  The  worst  activities,  however,  take  place  on  the  “deep  web”  or  “dark  net.” 
The  deep  web  is  the  portion  of  the  Internet  hidden  from  casual  users,  and  in  most  cases,  all 
law  enforcement.  This  is  where  illicit  users  use  untraceable  bitcoins  to  buy  illegal  drugs  and 
guns  off  the  Silk  Road20,  conduct  human  trafficking,  buy  false  passports,  or  trade  in  stolen 
credit  card  numbers.  Users  can  even  find  advertisements  for  assassination  services  and 
weapons  of  mass  destruction.”  Considering  the  meteoric  rise  of  the  Internet  in  Burma, 
millions  of  Burmese  will  soon  be  able  to  buy  and  sell  physical  objects  and  to  trade  ideas  and 
information  on  both  the  surface  web  and  the  deep  web. 
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Cyberhate 

One  considerable  danger  for  a  country  filled  with  large  numbers  of  naive  Internet 
users,  and  in  a  country  where  the  population  has  no  historical  context  for  freedom  of  speech, 
is  the  use  of  the  Internet  by  one  portion  of  the  population  to  incite  hate  or  violence  against 
another.  One  Burmese  issue  especially  vulnerable  to  this  kind  of  online  inflammation  is  the 
ongoing  conflict  between  Buddhist  Rakhine  and  the  Muslim-minority  Rohingya.  In  fact,  it  is 
already  taking  place.  In  2012,  anti-Rohingya  rhetoric,  insults,  accusations,  and  calls  to 
action  on  the  Internet  turned  into  physical  violence  in  western  Burma.  The  ensuing  riots 
resulted  in  eleven  mosques  burned,  250  Rohingya  murdered,  and  a  further  estimated  140,000 
displaced  from  their  homes."  In  2014,  the  Internet  provided  the  Buddhist  monk  Ashin 
Wirathu,  self-proclaimed  as  “the  Burmese  Bin  Laden,”  a  new  means  to  stoke  the  fire  of 
religious-nationalistic  violence.  A  single  post  on  his  Facebook  page  that  a  Buddhist  girl  had 
been  raped  by  a  Muslim  man  in  Mandalay  drew  a  stone-throwing  crowd  of  over  300  people 
to  the  man’s  tea  shop.  The  subsequent  riot  and  police  response  resulted  in  the  deaths  of  two 
men  and  the  imposition  of  state- wide  martial  law.  Resentment  and  anger  continues  to 

simmer  on  both  sides,  much  of  it  expressed  online. 

The  use  of  social  media  has  proved  exceptionally  popular  in  Burma.  For  historical 
and  cultural  reasons,  sites  like  Facebook  effectively  “virtualize”  how  the  Burmese  have 
learned  to  interact  socially  in  the  physical  world.  Facebook  also  carries  a  level  of  credibility 
not  seen  in  many  other  countries.  After  decades  of  living  under  tight  governmental  control, 
the  informal  sharing  of  information  has  become  the  normal  way  of  passing  news.  In  this 
community,  as  Matthew  Schissler  from  Paung  Ku,  a  Burmese  civil  society  strengthening 
organization,  explains  it,  “rumor  and  word-of-mouth  information  are  more  credible  than  the 
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news  and  government  announcements  in  a  place  where  censorship  and  propaganda  have  long 
been  the  norm.”"  This  instinctive  trust,  combined  with  the  ease  of  misattribution  of  sources 
and  falsification  of  images  or  information  made  possible  by  the  Internet,  makes  a  dangerous 
combination.  Beyond  lending  unwarranted  credence  to  accusations,  cyberspace  also  now 
allows  hate  speech  to  reach  a  global  audience  instantaneously. 

Surprisingly,  the  only  thing  that  the  Burmese  fear  more  than  an  uncontrolled  ethno¬ 
religious  crisis  inflamed  by  the  hate  speech  of  bloggers,  Facebook  posters,  and  Tweeters  is 
the  sudden  reappearance  of  oppressive  government  censorship  and  criminalization  of  online 
expression.  In  the  words  of  Nay  Phone  Latt,  a  blogger  who  was  imprisoned  for  four  years 
under  still-current  laws  prohibiting  criticism  of  the  government,  "if  we  don't  regulate 
ourselves. . .  they  will  take  the  power  back.”  He  has  a  valid  concern.  While  the  government 
has  not  acted  on  it  during  the  current  period  of  transition,  the  2004  Electronic  Transactions 
Act  has  never  been  rescinded.26  In  this  legal  uncertainty  the  Burmese  government  and  its 
population  struggle  to  find  the  delicate  balance  between  privacy,  freedom  of  speech,  security, 
and  stability. 

Cybercrime 

Controlling  crime,  including  transnational  crime,  has  always  been  a  challenge  for  the 
Burmese  government.  For  example,  in  1989  the  government  ceded  a  large  part  of  the 
northeast  of  the  country  to  the  United  Wa  State  Army  (UWSA)  after  the  ethnic  minority 
group  fought  the  military  to  a  cease  fire  and  gained  autonomy  within  the  Shan  state.  The 
UWSA  has  been  called  “the  world’s  largest  narcotics  organization.”"  The  area  they  control 
is  Burma’s  portion  of  the  infamous  “Golden  Triangle,”  an  area  second  only  to  Afghanistan 
for  opium  production."  Along  with  methamphetamine  and  heroin,  the  value  of  the  illicit 
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drug  trade  from  this  region  is  estimated  at  between  one  and  two  billion  dollars  per  year. 
Crime  also  pervades  the  rest  of  the  country  in  the  form  of  human  trafficking,  weapons 
smuggling,  trade  in  endangered  species,  and  money  laundering.30  Decades  of  corruption 
within  the  ruling  junta  not  only  allowed  this  criminal  activity  to  take  place  but  also,  in  many 
cases,  supported  it  for  personal  profit.  The  Congressional  Report  on  Crime  in  Burma 
effectively  sums  the  situation  up  in  its  opening  statement:  “transnational  organized  criminal 
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groups  flourish  in  Burma.”  With  all  of  its  problems  controlling  the  physical  aspects  of 
crime,  the  introduction  of  widespread  Internet  availability,  with  its  intrinsic  lack  of 
regulation,  will  assuredly  create  additional  challenges  for  the  government. 

In  its  simplest  form  cybercrime  is  simply  a  virtual  manifestation  of  a  physical  crime 
or  criminal  transaction.  It  consists  of  stealing  physical  things,  intellectual  property,  or 
money.  It  can  also  involve  trafficking  illegal  goods  or  people,  providing  illegal  services,  or 
committing  fraud.  Widespread  Internet  availability  in  Burma  will  simply  increase  the 
number  of  potential  vendors  for  illegal  products  and  services  as  well  as  the  number  of 
potential  customers.  It  will  globalize  Burma’s  booming  illegal  marketplace.  It  will  also 
increase  the  number  of  potential  victims.  Fifty  years  of  relative  isolation  has  left  a  citizenry 
that  is  just  beginning  to  experience  networked  technologies  commonplace  elsewhere  in  the 
world.  For  example,  with  the  exception  of  a  few  hotels  in  Yangon,  credit  cards  are  not 
accepted  in  Burma  and  ATMs  are  just  beginning  to  appear,  but  only  in  major  tourist  areas 
heavily  frequented  by  Westerners.  Criminals,  adept  at  leveraging  the  Internet  to  their 
advantage,  will  find  a  newly-connected  Burma  a  lucrative  environment.  At  least  initially, 
there  is  no  expectation  that  the  Burmese  citizens  will  have  much  savviness  about  protecting 
themselves  from  these  cybercriminals. 
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Another  target  for  attack  by  cybercriminals  worldwide  will  be  the  millions  of  new 
computers  connected  to  the  Internet  in  Burma.  Criminal  organizations  gain  anonymity  and 
complicate  local  and  international  law  enforcement  by  “hijacking”  computers  in  other 
countries.  In  2011,  even  a  relatively  disconnected  Burma  suffered  these  types  of  attacks.  In 
the  first  quarter  of  that  year,  Burma  led  the  world  with  13%  of  all  malicious  Internet  traffic. 
This  traffic,  the  report  acknowledged,  was  most  likely  not  Burmese  hackers  but  rather  simply 
Burma-based  computers  providing  a  launch  point  for  criminals  residing  elsewhere.  Vietnam 
also  experiences  this  kind  of  exploitation.  Microsoft  recently  named  Vietnam  one  of  the 
largest  victims  of  cybercrime  in  the  world.34  Widespread  vulnerability,  attributed  to  the 
population’s  poor  understanding  of  effective  security  practices,  sharing  of  pirated  software, 
and  general  naivete  regarding  privacy,  allowed  cybercriminals  to  infect  nearly  50%  of  the 

T  C 

computers  in  the  country  with  malicious  code.  The  costs  for  Vietnam,  as  they  will  be  for 
Burma,  are  both  direct,  when  theft  in  Vietnam  occurs,  and  indirect,  as  Vietnam  must  pay  for 
workers’  lost  productivity  and  the  excessive  bandwidth  used  by  its  “zombie”  computers. 

The  phenomenon  of  cybercrime  will  likely  evolve  in  Burma  over  time.  As  Burma’s 
citizens  come  online,  the  majority  of  cybercrime  will  likely  be  of  the  simplistic  form  — 
crime  by  individuals  affecting  individuals.  As  the  country  networks  government 
organizations  and  the  commercial  sector  over  time,  though,  these  targets  will  become  the 
preferred  target  of  cybercriminals.  Without  adequate  technical,  legal,  and  policy  controls  in 
place,  Burma’s  Internet  revolution  risks  failing  to  enable  the  economy  or  the  population  to  its 
full  potential.  This  is  certainly  not  Thein  Sein’s  desire,  nor  that  of  the  United  States. 
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Cyberterrorism 

One  more  tremendous  challenge  for  Burma  will  be  the  conduit  that  the  Internet  will 
provide  between  terrorist  organizations  and  the  Burmese  people.  In  a  global  context,  the 
ongoing  Rohingya  crisis  provides  exactly  the  kind  of  grievances  that  attract  the  attention  of 
international  terrorist  organizations.  In  fact,  in  August  2014,  A1  Qaeda’s  leader,  Ayman  al- 
Zawahiri  declared  the  creation  of  A1  Qaeda  in  the  Indian  Subcontinent,  ostensibly  to  unite  the 
Muslim  people  of  this  region.  Burma  was  specifically  mentioned  in  his  YouTube 
announcement  video.36  It  appears  that  along  with  democratic  reforms,  transnational 
terrorism  is  also  coming  to  Burma. 

As  cyberterrorism  is  often  misunderstood,  it  is  worth  briefly  mentioning  that  the 
danger  to  Burma  is  not  that  of  cyberwarfare.  Cyberwarfare  is  the  use  of  the  Internet  to  attack 
critical  infrastructure,  the  networked  portions  of  governmental  or  non-governmental 
institutions,  or  even  the  digital  infrastructure  itself.  Most  countries,  Burma  included,  are 
simply  too  disconnected  from  the  net  to  make  much  of  a  target  for  a  cyberattack.  Most 
terrorist  organizations  also  find  planning  and  executing  an  effective  cyberattack  incredibly 

ro 

difficult  and  not  worth  the  significant  investment.  The  real  threat  to  the  Burmese 
government  and  population  will  be  terrorist  organizations’  more  routine  use  of  the  Internet  as 
a  means  to  raise  funds,  recruit,  spread  propaganda,  and  encourage  acts  of  violence.39 

Terrorism  thrives  on  the  Internet.  The  low  cost  to  establish  a  presence,  the  inherent 
anonymity,  the  reach  of  a  global  audience,  and  the  difficulties  nation-states  have  in  policing 
cyberspace  makes  the  Internet  an  unbeatable  communication  method.  A  United  Nations 
study  conducted  in  2004  found  that  virtually  every  known  terrorist  organization  had  its  own 
website.40  The  widespread  connectivity  of  Burmese  society  will  bring  the  population  into 
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regular  and  close  contact  with  terrorists  once  these  sites  become  just  a  click  away  on  a 
mobile  phone.  The  results  may  be  dire:  more,  better-funded  terrorists;  increasingly 
radicalized  minority  groups  within  Burma;  and  terrorist  attacks  in  greater  numbers  and 
sophistication.  While  many  terrorists  will  limit  their  activities  only  to  Burma,  including 
targeting  the  Burmese  government,  others  will  have  regional  and  global  agendas.  The 
substantial  ungovemed  spaces  in  Burma,  soon  with  Internet  service,  may  be  attractive  to 
terrorist  organizations  increasingly  under  pressure  elsewhere  in  the  world. 

Given  the  number  of  already-existing  issues  and  the  new  grievances  sure  to  result 
from  social,  political,  and  economic  reform,  terrorism  will  likely  be  part  of  Burma’s  future. 
For  example,  the  UWSA’s  existence  is  becoming  an  increasingly  embarrassing  reminder  of 
the  past  corruption  and  criminal  complicity  of  the  Burmese  government.41  It  is  conceivable 
that  funding  terrorist  attacks  outside  of  the  Shan  state  might  be  an  attractive  way  to  distract 
the  military  from  any  thoughts  of  attempting  to  reestablish  control  of  UWSA-held  areas  and 
the  associated  drug  trade.  Similarly,  nationalistic  Buddhists  desperate  to  drive  the  Rohingya 
out  of  Burma  would  likely  appreciate  the  support  of  individuals  and  organizations  with 
similar  motivations,  regardless  of  where  they  physically  reside.  Using  the  same  logic,  a  real 
danger  exists  that  140,000  disenfranchised  and  displaced  Rohingya  in  the  Rakhine  state 
provide  a  willing  pool  of  recruits  for  Muslim  terrorist  organizations  offering  jihad  at  home  or 
abroad.42 

The  challenge  for  the  Burmese  government,  as  with  cyberhate  and  cybercrime,  will 
be  to  craft  policies,  laws,  and  impose  technical  oversight  that  preserves  security  and  stability 
while  respecting  the  newly  rediscovered  rights  of  its  citizens:  freedom  of  speech,  privacy, 
and  a  freedom  from  unreasonable  content  filtering.  The  challenge  is  tremendous.  Beyond 
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tackling  the  process  of  identifying,  pursuing,  arresting,  and  prosecuting  terrorists,  Burma  will 
first  have  to  define  what  it  considers  a  “terrorist,”  a  nontrivial  task.  The  Burmese 
government  should  expect  that  terrorists  will  challenge  any  controls  of  online  behavior  as 
they  relentlessly  press  their  online  recruiting,  fundraising,  and  proselytizing.  They  will  also 
use  a  tactic  in  the  virtual  world  that  they  use  extensively  in  the  physical  world.  Any 
overreaction  by  the  government  to  cyberterrorists  methods,  either  through  policy  or  police 
crackdown,  will  be  highlighted  and  magnified  as  a  method  to  drive  a  wedge  between  the 
government  and  its  people  —  with  grave  consequences  for  both. 

Recommendations 

The  United  States  is  in  a  unique  position  to  assist  the  Government  of  Myanmar  as  it 
struggles  with  the  numerous  issues  certain  to  arise  during  its  period  of  explosive  Internet 
growth.  While  the  natural  tendency  is  to  distrust  the  Burmese  government  after  fifty  years  of 
oppression  of  their  population,  it  is  in  America’s  interest  to  help.  This  will  not  be  politically 
easy.  Beyond  the  distaste  of  working  with  former  junta  members,  assisting  another  country 
in  monitoring  and  controlling  their  citizen’s  online  activity  so  close  on  the  heels  of 
accusations  against  the  U.S.  National  Security  Agency  of  spying  on  its  own  citizens,  may 
confuse  our  allies  in  Asia,  elsewhere  in  the  world,  and  even  our  own  citizens.  There  are 
risks,  however,  to  doing  nothing. 

As  Internet  adoption  becomes  widespread  in  Burma,  the  Burmese  government  may 
assume  a  laissez-faire  attitude  toward  policing  the  Internet.  Cybercriminals  and 
cyberterrorists  will  take  advantage  of  this  tremendous  opportunity  and  will  exploit  the 
Burmese  people,  foreign  investors,  tourists,  and  even  the  government  itself.  Factions  within 
Burma  may  also  see  this  newfound  freedom  as  an  opportunity  to  settle  old  scores  resulting  in 
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destabilization  of  the  country  due  to  ethno-religious  violence.  A  second  possible  outcome  is 
that,  based  on  initial  difficulties,  Burma’s  government  decides  that  Internet  freedom  risks  are 
simply  not  worth  the  gains.  The  resumption  of  censorship,  restrictions  on  free  speech,  and 
prosecution  of  online  dissent  would  be  catastrophic  for  the  country’s  population  and  would 
turn  Burma  into  an  impossible  partner  for  the  United  States. 

Technical  Assistance 

The  United  States  can  assist  in  Burma  with  implementing  technical  measures 
appropriate  to  secure  the  country’s  infrastructure  and  population  from  cybercriminals  and 
cyberterrorists.  The  recent  stand-up  of  the  U.S.  Cyber  Command  provides  a  center  of 
excellence  within  the  Department  of  Defense  for  analyzing  an  adversary’s  computer 
exploitation  techniques  and  technologies  and  then  developing  methods  for  protecting 
networks.  Other  federal  agencies  have  similar  cyber  expertise  appropriate  to  their  domains 
(e.g.  Department  of  the  Treasury,  Department  of  Justice,  Federal  Communications 
Commission).  An  interagency  approach  to  engagement  might  be  invaluable  to  the  Burmese 
government  as  they  attempt  to  map  a  disciplined  evolution  to  a  networked  society. 

Depending  on  the  United  States  government’s  and  Burmese  government’s 
unwillingness  to  work  bilaterally  on  the  sensitive  topic  of  telecommunications  infrastructure 
security,  there  might  need  to  be  other  ways  with  which  to  cooperate  less  obtrusively.  One 
solution  may  be  via  the  Association  of  Southeast  Asian  States  (ASEAN),  which  has 
agreements  in  place  to  encourage  cybersecurity  assistance  between  partner  nations.43 
Another  potential  choice  exists  in  a  public-private  partnership  which  supports  the  United 
Nations’  International  Telecommunication  Union  (ITU)  called  the  International  Multilateral 
Partnership  Against  Cyber  Threats  (IMPACT).  ITU-IMPACT,  built  at  the  urging  of  the 
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Malaysian  government  and  headquartered  near  Kuala  Lumpur,  is  tasked  to  “provide  . . . 
Member  States  access  to  expertise,  facilities  and  resources  to  effectively  address  cyber 
threats.”44  The  United  States  is  neither  a  member  of  ASEAN  nor  ITU-IMPACT.  It  does, 
however,  regularly  share  cybersecurity  expertise,  incident  reporting,  and  conduct  cooperative 
training  and  exercises  with  both  organizations  or  their  member  nations  45  Cooperation  with 
either  ASEAN  or  ITU-IMPACT  effectively  provides  a  conduit  for  technical  assistance  to 
Burma,  thereby  helping  to  improve  its  cybersecurity,  and  by  extension,  regional  and  global 
cybersecurity. 

Freedom  of  the  press,  speech,  and  expression 

Regardless  of  technical  solutions  to  curbing  cybercrime,  or  cyberterrorism,  the  first 
and  largest  issue  Burma  must  solve  is  the  question  of  how  human  rights  and  freedom  of 
expression  might  be  balanced  with  reasonable  online  restrictions.  Acknowledging  that  this  is 
a  Burmese  problem  for  the  Burmese  government  and  people  to  solve,  the  United  States  can 
assist.  America  has  struggled  for  over  two  hundred  and  thirty-eight  years  with  the  freedom 
of  expression  versus  security  paradox  and  has  accumulated  significant  expertise  meeting  the 
challenges  of  imposing  an  equitable  rule  of  law  on  the  Internet.  The  U.S.  Constitution’s  First 
Amendment,  whether  in  cyberspace  or  in  the  physical  world,  has  limits.  Current  U.S.  cyber- 
related  legislation  and  decades  of  legal  case  precedents  might  provide  the  Burmese 
government  a  sense  of  how  Internet  controls  might  be  applied  in  their  country  —  and  applied 
in  a  manner  that  would  be  held  in  high  regard  by  the  United  States  and  other  states  with 
democratic  traditions. 

As  with  the  issue  of  technical  assistance,  close  direct  cooperation  between  our 
governments  may  be  too  hard  for  one  or  both  countries  at  the  present.  There  are,  however, 
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other  organizations  that  can  assist  with  Burma’s  struggle  to  reasonably  control  the  Internet. 
Burma  already  has  a  strong  relationship  with  the  United  Nation’s  Office  on  Drugs  and  Crime 
(UNODC),46  whose  mandate  has  recently  expanded  to  include  cybercrime  and 
cyberterrorism.47  This  organization  has  extensive  expertise  in  assisting  member  countries 
with  integrating  Internet-based  activities  into  existing  government  paradigms,  specifically 
recommending  policies,  laws,  and  surveillance  mechanisms  that  allow  freedom  of  expression 
and  that  respect  international  human  rights  standards  while  still  detecting  illegal  behavior, 
apprehending  perpetrators,  and  prosecuting  them  under  the  rule  of  law.  Our  support  of 
UNODC,  and  their  subsequent  support  to  Burma,  would  ensure  excellent  support  to  the 
Burmese  government  while  also  lending  the  country  a  measure  of  indisputable  international 
legitimacy  which  cyberhaters,  cybercriminals,  cyberterrorists  would  find  difficult  to  contest. 
Grasping  the  Extended  Hand 

Lastly,  one  of  the  easiest  and  most  effective  measures  the  United  States  might  take  is 
to  overtly  express  support  and  encouragement  to  the  Burmese  government  during  their 
struggle  to  modernize.  While  a  large  degree  of  mistrust  still  exists  between  the  United  States 
and  Burma  as  well  as  between  Burma’s  population  and  its  own  government,  signs  of 
progress  are  unmistakable.  It  should  be  possible  to  endorse  policies  we  support  without  a 
wholesale  endorsement  the  government.  Insight  into  the  challenges  the  Thein  government 
faces  in  the  unique  socio-cultural  and  historical  context  of  Burma  might  lead  to  previously- 
unrealized  opportunities  for  further  cooperation.  Additionally,  with  a  non- accusatory  voice 
in  the  conversation,  we  have  the  potential  to  influence  Burmese  leadership  in  a  way  that  will 
make  the  country  a  strong  partner  for  regional  and  global  security  as  well  as  a  robust 
economic  partner.  The  world  is  becoming  overwhelmingly  interdependent.  It  is  appropriate 
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that  the  Internet,  the  catalyst  for  this  interdependence,  should  be  one  of  the  first  areas  where 
the  United  States  reengages  with  Burma. 

Conclusion 

For  nearly  fifty  years,  a  corrupt  and  repressive  military  regime  in  Burma  represented 
the  antithesis  of  the  American  ideals  of  life,  liberty,  and  the  pursuit  of  happiness.  Despite 
draconian  political  and  economic  measures,  the  United  States  Government  could  never 
pressure  the  junta  into  discontinuing  human  rights  abuses,  curbing  illegal  activities, 
reforming  the  military,  adopting  more  egalitarian  economic  policies,  improving  social 
services,  or  even  simply  allowing  their  people  a  basic  measure  of  freedom  of  expression. 
Thein  Sein’s  election  in  201 1,  however,  brought  about  a  new,  exciting  possibility.  As  part  of 
a  broader  effort  to  democratize  the  society  and  capitalize  its  economy,  the  Burmese 
government  has  made  real  progress  in  the  modernizing  mobile  communications,  improving 
access  to  the  Internet,  and  relaxing  long-standing  policies  prohibiting  free  speech.  In  many 
cases,  these  changes  have  surpassed  even  their  own  citizens’  most  optimistic  hopes.  Sadly, 
but  predictably,  some  elements  inside  and  outside  of  Burma  now  want  to  take  advantage  of 
these  loosened  controls,  the  associated  challenges  they  pose  to  the  Burmese  government,  and 
the  general  Internet  naivete  of  the  Burmese  people.  For  practical  reasons,  the  United  States 
now  finds  itself  in  the  strange  position  of  trying  to  convince  Burma  to  impose  more  not  less 
control  over  the  free  and  open  communication  that  is  about  to  sweep  over  the  country.  It  is, 
counterintuitively,  restricting  what  the  Burmese  people  can  say  or  do  on  the  Internet,  though, 
that  will  best  enhance  Burma’s  stability,  security,  and  prosperity  and  that  will  give  the 
Burmese  people  their  best  chance  for  happiness. 
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